VDB

DEBIAN-CVE-2025-21814

DEBIAN-CVE-2025-21814 PUBLISHED CVSS 5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info->enable callback is always set The ioctl and sysfs handlers unconditionally call the ->enable callback. Not all drivers implement that callback, leading to NULL dereferences. Example of affected drivers: ptp_s390.c, ptp_vclock.c and ptp_mock.c. Instead use a dummy callback if no better was specified by the driver.

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:13linux0, 0
Debian:14linux0, 0
Debian:12linux6.1.76-1, 6.1.76-1~bpo11+1, 6.1.82-1
Debian:11linux5.10.218-1, 5.10.221-1, 5.10.223-1
Debian:11linux-6.10, 6.1.106-3~deb11u1, 6.1.106-3~deb11u2

Timeline

  • Feb 27, 2025 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›